Commit graph

915 commits

Author SHA1 Message Date
Miroslav Štampar
057e614500 Fix for --safe-url carrying injected cookie payload and --safe-req getting target's GET parameters 2026-11-12 14:51:29 +01:00
Miroslav Štampar
3ab05cade0 Fix for anti-CSRF tokens in JSON (spaced), header names with dashes and header values with special chars 2026-11-12 14:50:11 +01:00
Miroslav Štampar
445516b151 Fix for retried requests (e.g. timeout, 429, dead proxy) losing the response page 2026-11-12 14:44:08 +01:00
Miroslav Štampar
fec03cf662 Fix for --param-del being URL encoded in GET requests 2026-11-12 14:28:47 +01:00
Miroslav Štampar
a7a9d7a8fe Fix for --eval dropping parameters after an empty one 2026-11-12 11:50:32 +01:00
Miroslav Štampar
f9e53443ed Fix for anti-CSRF tokens containing '+' (and GET token not found with -p) 2026-11-12 11:50:32 +01:00
Miroslav Štampar
3c2384525c Fix for --param-del being URL encoded in POST payload requests 2026-11-12 11:49:07 +01:00
Miroslav Štampar
161af41c9c Fix for chained tamper hints (e.g. luanginx,space2comment) 2026-11-12 11:49:07 +01:00
Miroslav Štampar
f65de0e890 Minor update
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-11-04 10:20:01 +01:00
cuteNBD
b333a14d8b
Keep WebSocket responses on normal closure (#6173)
Co-authored-by: cuteNBD <206630735+bingdongni@users.noreply.github.com>
2026-11-04 10:18:29 +01:00
cuteNBD
74f50122fb
Preserve custom Host headers for WebSocket requests (#6172)
Co-authored-by: cuteNBD <206630735+bingdongni@users.noreply.github.com>
2026-11-04 10:18:06 +01:00
Miroslav Štampar
6530184e2c Implements #4271
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-10-19 11:46:27 +02:00
Miroslav Štampar
2c6e4d85b5 Fixes #6142
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-10-10 12:00:33 +02:00
Miroslav Štampar
d486742eec Fixes #6106
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-09-07 12:06:22 +02:00
Miroslav Štampar
7b8bf447a0 Stabilization of --timeless 2026-08-07 13:13:48 +02:00
Miroslav Štampar
e81a99c4f3 Renaming --murphy-rate to --jitter 2026-07-29 09:05:44 +02:00
Miroslav Štampar
3a680be4eb Minor patches 2026-07-29 08:20:08 +02:00
Miroslav Štampar
5dd91ba8ca Minor patch 2026-07-28 00:48:54 +02:00
Miroslav Štampar
a4c983ae06 Adding native Brotli (br) and Zstandard (zstd) response decoding
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 00:42:27 +02:00
Miroslav Štampar
2d9e9ed959 Implementing support for 429 (rate limit)
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-24 15:17:05 +02:00
Miroslav Štampar
26e13122ca Fixing #6087 2026-07-21 11:34:18 +02:00
Miroslav Štampar
2e28b70975 Minor patch 2026-07-19 18:43:16 +02:00
Miroslav Štampar
d2a9db2aba Minor patch 2026-07-19 18:27:04 +02:00
Miroslav Štampar
47e98a02d0 Minor patch 2026-07-19 17:39:30 +02:00
Miroslav Štampar
ab6ce22593 Add experimental gRPC-Web (text) support 2026-07-17 23:38:34 +02:00
Miroslav Štampar
fc1ae6950e Adding native websocket support 2026-07-09 13:56:40 +02:00
Miroslav Štampar
fd009027f7 Adding --payload-lint to CI/CD 2026-07-08 17:51:37 +02:00
Miroslav Štampar
e2c55c1ddc Minor patch 2026-07-08 11:14:34 +02:00
Miroslav Štampar
f46c463eba Adding support for --timeless HTTP2 technique 2026-07-08 01:58:36 +02:00
Miroslav Štampar
788c9fa134 Minor patch 2026-07-06 18:54:26 +02:00
Miroslav Štampar
6514597dbb Minor renaming of options 2026-07-01 17:34:31 +02:00
Miroslav Štampar
40a31c155c Removing thirdparty OrderedDict 2026-07-01 15:26:59 +02:00
Miroslav Štampar
39ba1bc00e Adding custom/own support for HTTP2 2026-07-01 12:21:11 +02:00
Miroslav Štampar
cef105f322 Minor bug fixes
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-06-24 01:59:02 +02:00
Miroslav Štampar
35fefc3b65 Improvements for JSON_AGG retrieval 2026-06-20 02:28:21 +02:00
Miroslav Štampar
03fb84c5be Minor bug fixes 2026-06-14 21:44:04 +02:00
Miroslav Štampar
6e1fe6fbca Minor bug fix 2026-06-11 23:31:41 +02:00
Miroslav Štampar
c6d272bb81 Minor patch for HTTP/2 connections (with error responses) 2026-06-05 12:39:48 +02:00
Miroslav Štampar
b702cbae88 Implementing MAX_CONNECTION_TOTAL_SIZE check for websocket responses 2026-06-05 12:33:26 +02:00
Miroslav Štampar
b30c169b8a Avoid eval processing crash on JSON arrays
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-06-02 14:00:09 +02:00
Miroslav Štampar
8cac5fdab6 Fix forced SSL port rewrite 2026-06-02 13:56:32 +02:00
Miroslav Štampar
bfe39d010f Fix WebSocket request header formatting 2026-06-02 13:54:48 +02:00
Miroslav Štampar
fadf5bb753 Honor injected Host header value 2026-06-02 13:46:32 +02:00
Miroslav Štampar
8258d6d233 Strip Brotli from Accept-Encoding header 2026-06-02 13:46:31 +02:00
Your Name
36c55a33fb Handle unknown WebSocket status codes 2026-06-02 13:37:29 +02:00
Your Name
c07b15666c Fix retry-on check on empty response 2026-06-02 13:36:13 +02:00
Your Name
5a12bd290d Fix WebSocket request traffic logging 2026-06-02 13:06:29 +02:00
Your Name
39b8ff4bec Patch for #6049 2026-04-17 10:42:01 +02:00
Your Name
c20c718dc3 Minor refactoring 2026-04-15 19:08:17 +02:00
soffensive
9312d26da8
Make XML/HTML encoding in SOAP requests optional (#6015)
Co-authored-by: soffensive <soffensive>
2026-02-05 10:52:25 +01:00